5 Oct
2015
5 Oct
'15
5:44 p.m.
On 5 Oct 2015 at 17:20:39, Eduard Moraru
(enygma2002@gmail.com(mailto:enygma2002@gmail.com)) wrote:
On Mon, Oct 5, 2015 at 3:37 PM, vincent(a)massol.net
wrote:
The difference is that we use script macros everywhere (a lot more than PR) so this makes
it now completely impossible to remove any user who’s ever coded using some script
macros.
Thus I believe we need to brainstorm and find a solution as it’s becoming more urgent
now.
Some ideas:
* Don’t allow deleting users, just allow disabling them.
* When deleting a user, ask who’s becoming responsible for the content of that author (ie
associate the 2 ids) and when checking permissions, check using the responsible user id.
* Before deleting a user warn about the consequences (for pages which have PRs and
Scripts) and recommend disabling the user instead. And wait for signed scripts, hoping
that it won’t take long before we implement it...
* Have a store for deleted users and use it when checking permissions
Thanks
-Vincent
On 5 Oct 2015 at 14:33:11, Eduard Moraru (enygma2002(a)gmail.com(mailto:
enygma2002(a)gmail.com)) wrote:
How is this different from what we are doing with Programming Rights? If
the author of the script is no more, then the script's credibility is no
more, so it should not be executed. Hello Keith,
I see 2 possibilities here:
1) Is there any chance that, while you`ve executed the Distribution
Wizard,
you might have missed (ignored) the document
XWiki.XWikiPreferences? Or
maybe you`ve chosen to keep all your changes? The point is that you
rights
configuration (specifically the 'script'
right section) for the
XWikiAllGroup in Administration should look like in this screenshot [1]
(from the 7.2 release notes [2]). The 'script' right is explicitly given
to
all users so that the migration/upgrade behaves
as before, until you
decide
otherwise. Please check that the rights setup is
properly upgraded.
2) The only other case I can think of is that you might have deleted the
user that is set as last content author in (most of) your documents. If
this is the case, then indeed the scripts will not be able to be executed
since the user no longer exists (and thus can not own the 'script'
right).
To fix this, you could recreate the previously
deleted user and make sure
he has the 'script' right.
On this second point, does it mean that we cannot delete users anymore
because of this? That could be an issue…
Thanks,
Eduard
Thanks
-Vincent
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users Please let us know if that helps.
Thanks,
Eduard
----------
[1]
http://www.xwiki.org/xwiki/bin/download/ReleaseNotes/ReleaseNotesXWiki72/sc…
[2]
http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki72#HScrip…
On Mon, Oct 5, 2015 at 2:33 PM, Keith Davis
wrote:
> Yes, I did execute the Distribution Wizard.
>
> Keith Davis (214) 906-5183
>
> From: Vincent Massol [mailto:vmassol@gmail.com] On Behalf Of
> vincent(a)massol.net
> Sent: Monday, October 05, 2015 6:30 AM
> To: XWiki Users
> Cc: Keith Davis
> Subject: Re: [xwiki-users] XWiki 7.2 - Velocity Script Errors
>
> Hi Keith,
>
> See
>
http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki72#HScrip…
>
> Are you sure you’ve executed the Distribution Wizard? (because by
default
> we give Script Rights to users).
>
> @Edy: I think we need some additional info in the Release Notes about
this.
>
> Thanks
> -Vincent
>
> On 5 Oct 2015 at 13:25:08, Keith Davis (keithdavis(a)pridedallas.com
(mailto:
> keithdavis(a)pridedallas.com))> >
keithdavis(a)pridedallas.com))> wrote:
>
> > I tried to send this once, but it looks like it did not go through.
> >
> > I just upgraded from 7.1.2 to 7.2 and now it looks like none of the
> Velocity scripts work. I ended up rolling back to 7.1.2, because it's
> unusable in this state.
> >
> > org.xwiki.rendering.macro.MacroExecutionException: The execution of
the
> [velocity] script macro is not allowed.
Check the rights of its last
author
> or the parameters if it's rendered from
another script.
>
> [snip]
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users